Forum Discussion

F5Hopper_28651's avatar
F5Hopper_28651
Icon for Nimbostratus rankNimbostratus
Aug 27, 2012

Blocking embedded JAVA and HTML

Hey Guys,   Im not sure I need to do this on a firewall level or I can do it on the F5. I have looked around and didnt find anything that matched up with what I wanted to do.   Im trying to bl...
application delivery
dev
devops
iRules
F5Hopper_28651's avatar
F5Hopper_28651
Icon for Nimbostratus rankNimbostratus
Aug 27, 2012
I think for a first volly I want to attack the blocking of the embedded JavaScript. We have had some XSS attacks and their dropping in JavaScript. I thought I might be able to look for anything javascript and block it 100%.

 

 

DEV showed me this URL for an example.

 

http://www.BLOCKED.com/contact.aspx?d=%3Cscript%20src=%22/assets/modernizr-539876544e0fec3c0dd90fa78e11d079.js%22%20type=%22text/javascript%22%3E%3C/script%3E

 

 

and HTTP as

 

http://www.BLOCKED.com/contact.aspx?d=%3Cbr+%2F%3E

 

 

Im not a code master so this could be sand script to me.

 

 

Thanks